debate
Fail
Audited by Snyk on Apr 14, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt requires embedding full codebase context (including "auth patterns") into generated proposals and into the codex CLI invocation, which can cause literal secret values found in files or configs to be passed through and output verbatim, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata